CVE-2017-7774

Description

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.

Risk Information

Base Score
9.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
Exploitation Probability
0.562

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 53.0.3Mac
Font rendering engine for Complex Scripts (USN-3398-1) libgraphite2-3_1.3.10-0ubuntu0.14.04.1_i386.debLinux
Font rendering engine for Complex Scripts (USN-3398-1) libgraphite2-3_1.3.10-0ubuntu0.14.04.1_amd64.debLinux
Font rendering engine for Complex Scripts (USN-3398-1) libgraphite2-3_1.3.10-0ubuntu0.16.04.1_i386.debLinux
Font rendering engine for Complex Scripts (USN-3398-1) libgraphite2-3_1.3.10-0ubuntu0.16.04.1_amd64.debLinux
Font rendering engine for Complex Scripts (USN-3398-1) libgraphite2-3_1.3.10-0ubuntu0.17.04.1_i386.debLinux
Font rendering engine for Complex Scripts (USN-3398-1) libgraphite2-3_1.3.10-0ubuntu0.17.04.1_amd64.debLinux
Graphite2 security update (CESA-2016:0594) graphite2-1.3.10-1.el7_3.i686.rpmLinux
Graphite2 security update (CESA-2016:0594) graphite2-1.3.10-1.el7_3.x86_64.rpmLinux
Graphite2 security update (CESA-2016:0594) graphite2-devel-1.3.10-1.el7_3.i686.rpmLinux
Graphite2 security update (CESA-2016:0594) graphite2-devel-1.3.10-1.el7_3.x86_64.rpmLinux
(RHSA-2017:1793) Important: graphite2 security update graphite2-1.3.10-1.el7_3.i686.rpmLinux
(RHSA-2017:1793) Important: graphite2 security update graphite2-1.3.10-1.el7_3.x86_64.rpmLinux
(RHSA-2017:1793) Important: graphite2 security update graphite2-devel-1.3.10-1.el7_3.i686.rpmLinux
(RHSA-2017:1793) Important: graphite2 security update graphite2-devel-1.3.10-1.el7_3.x86_64.rpmLinux
Graphite2 update (ELSA-2017-1793) graphite2-1.3.10-1.el7_3.x86_64.rpmLinux
Graphite2-devel update (ELSA-2017-1793) graphite2-devel-1.3.10-1.el7_3.x86_64.rpmLinux
Graphite2 update (ELSA-2017-1793) graphite2-1.3.10-1.el7_3.i686.rpmLinux
Graphite2-devel update (ELSA-2017-1793) graphite2-devel-1.3.10-1.el7_3.i686.rpmLinux
(RHSA-2017:1793)Important: security update graphite2-debuginfo-1.3.10-1.el7_3.i686.rpmLinux
(RHSA-2017:1793)Important: security update graphite2-debuginfo-1.3.10-1.el7_3.x86_64.rpmLinux
Out-of-bounds Read Vulnerability (CVE-2017-7774)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611870Mozilla Firefox For Mac (142.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234